CVE-2006-2251

Опубликовано: 09 мая 2006

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.html
Patch
http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost
Patch
http://secunia.com/advisories/19973
Patch
Vendor Advisory
http://www.osvdb.org/25252
http://www.securityfocus.com/archive/1/433076
Patch
http://www.securityfocus.com/bid/17851
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/26290
http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.html
Patch
http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost
Patch
http://secunia.com/advisories/19973
Patch
Vendor Advisory
http://www.osvdb.org/25252
http://www.securityfocus.com/archive/1/433076
Patch
http://www.securityfocus.com/bid/17851
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/26290

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:invision_power_services:invision_community_blog:1.0:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_community_blog:1.1:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_community_blog:1.1.2_final:*:*:*:*:*:*:*

cpe:2.3:a:invision_power_services:invision_community_blog:1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00682

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r3p5-rg8r-jfcj

github

почти 4 года назад